A method and system for verifying user authorization using zero-proof verification

Abstract

In response to receiving a first request from a user to determine eligibility to perform a data interaction, the user is prompted to provide eligibility information. An eligibility result is determined by inputting the eligibility information into an evaluation algorithm. A zero-knowledge proof of the eligibility result is generated. In response to receiving a second request from the user to perform the data interaction, the zero-knowledge proof is verified. When the zero-knowledge proof is found to be valid, the data interaction requested by the user is initiated.

1 . A system comprising:
 a memory that stores an evaluation algorithm configured to determine eligibility for performing a data interaction based on an eligibility criteria; and   a processor communicatively coupled to the memory and configured to:
 receive, from a computing node associated with a user, a first request from the user to determine eligibility of the user to perform the data interaction; 
 in response to receiving the first request, prompt the user to provide eligibility information associated with the user, wherein the user is eligible to perform the data interaction when the eligibility information associated with the user satisfies the eligibility criteria; 
 receive the eligibility information from the user; 
 determine an eligibility result by inputting the eligibility information into the evaluation algorithm, wherein the eligibility result indicates the eligibility of the user to perform the data interaction based on the eligibility criteria; 
 in response to determining that the user is eligible to perform the data interaction, transmit an indication of the eligibility to the computing node; 
 generate a zero-knowledge proof of the eligibility of the user to perform the data interaction, wherein the zero-knowledge proof does not include the eligibility information received from the user; 
 receive a second request from the user to perform the data interaction; 
 in response to receiving the second request to perform the data interaction, verify the zero-knowledge proof of the eligibility of the user to perform the data interaction by running a verification algorithm; 
 in response to determining that the zero-knowledge proof is valid, initiate the data interaction requested by the user. 
   
     
     
         2 . The system of  claim 1 , wherein the processor is further configured to:
 receive a third request from the user to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction; and   generate the zero-knowledge proof in response to receiving the third request to generate the zero-knowledge proof.   
     
     
         3 . The system of  claim 1 , wherein the processor is further configured to:
 encrypt the eligibility information based on an encryption key; and   input the encrypted eligibility information into the evaluation algorithm for determining the eligibility of the user to perform the data interaction.   
     
     
         4 . The system of  claim 1 , wherein:
 the prompt comprises at least one question; and   the eligibility information received from the user comprises an answer to the at least one question.   
     
     
         5 . The system of  claim 1 , wherein:
 a result of the evaluation algorithm indicating the eligibility of the user comprises a binary value;   a first binary value indicates that the user is eligible to perform the data interaction; and   the remaining binary value indicates that the user is ineligible to perform the data interaction.   
     
     
         6 . The system of  claim 1 , wherein the processor is further configured to use a Zero-Knowledge Succinct Non-interactive Argument of Knowledge algorithm to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction and verify the zero-knowledge proof. 
     
     
         7 . The system of  claim 1 , wherein the processor is further configured to:
 encrypt the eligibility information based on an encryption key; and   generate the zero-knowledge proof based on the encrypted eligibility information and the eligibility result indicating the eligibility of the user to perform the data interaction.   
     
     
         8 . A method for evaluating eligibility, the method comprising:
 receive, from a computing node associated with a user, a first request from the user to determine eligibility of the user to perform a data interaction;   in response to receiving the first request, prompt the user to provide eligibility information associated with the user, wherein the user is eligible to perform the data interaction when the eligibility information associated with the user satisfies an eligibility criteria;   receive the eligibility information from the user;   determine an eligibility result by inputting the eligibility information into an evaluation algorithm, wherein:
 the evaluation algorithm is configured to determine eligibility for performing the data interaction based on the eligibility criteria; and 
 the eligibility result indicates the eligibility of the user to perform the data interaction based on the eligibility criteria; 
   in response to determining that the user is eligible to perform the data interaction, transmit an indication of the eligibility to the computing node;   generate a zero-knowledge proof of the eligibility of the user to perform the data interaction, wherein the zero-knowledge proof does not include the eligibility information received from the user;   receive a second request from the user to perform the data interaction;   in response to receiving the second request to perform the data interaction, verify the zero-knowledge proof of the eligibility of the user to perform the data interaction by running a verification algorithm;   in response to determining that the zero-knowledge proof is valid, initiate the data interaction requested by the user.   
     
     
         9 . The method of  claim 8 , further comprising:
 receiving a third request from the user to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction; and   generating the zero-knowledge proof in response to receiving the third request to generate the zero-knowledge proof.   
     
     
         10 . The method of  claim 8 , further comprising:
 encrypting the eligibility information based on an encryption key; and   inputting the encrypted eligibility information into the evaluation algorithm for determining the eligibility of the user to perform the data interaction.   
     
     
         11 . The method of  claim 8 , wherein:
 the prompt comprises at least one question; and   the eligibility information received from the user comprises an answer to the at least one question.   
     
     
         12 . The method of  claim 8 , wherein:
 a result of the evaluation algorithm indicating the eligibility of the user comprises a binary value;   a first binary value indicates that the user is eligible to perform the data interaction; and   the remaining binary value indicates that the user is ineligible to perform the data interaction.   
     
     
         13 . The method of  claim 8 , further comprising using a Zero-Knowledge Succinct Non-interactive Argument of Knowledge algorithm to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction and verify the zero-knowledge proof. 
     
     
         14 . The method of  claim 8 , further comprising:
 encrypting the eligibility information based on an encryption key; and   generate the zero-knowledge proof based on the encrypted eligibility information and the eligibility result indicating the eligibility of the user to perform the data interaction.   
     
     
         15 . A non-transitory computer-readable medium storing instructions that when executed by a processor causes the processor to:
 receive, from a computing node associated with a user, a first request from the user to determine eligibility of the user to perform a data interaction;   in response to receiving the first request, prompt the user to provide eligibility information associated with the user, wherein the user is eligible to perform the data interaction when the eligibility information associated with the user satisfies an eligibility criteria;   receive the eligibility information from the user;   determine an eligibility result by inputting the eligibility information into an evaluation algorithm, wherein:
 the evaluation algorithm is configured to determine eligibility for performing the data interaction based on the eligibility criteria; and 
 the eligibility result indicates the eligibility of the user to perform the data interaction based on the eligibility criteria; 
   in response to determining that the user is eligible to perform the data interaction, transmit an indication of the eligibility to the computing node;   generate a zero-knowledge proof of the eligibility of the user to perform the data interaction, wherein the zero-knowledge proof does not include the eligibility information received from the user;   receive a second request from the user to perform the data interaction;   in response to receiving the second request to perform the data interaction, verify the zero-knowledge proof of the eligibility of the user to perform the data interaction by running a verification algorithm;   in response to determining that the zero-knowledge proof is valid, initiate the data interaction requested by the user.   
     
     
         16 . The non-transitory computer-readable medium of  claim 15 , wherein the instructions further cause the processor to:
 receive a third request from the user to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction; and   generate the zero-knowledge proof in response to receiving the third request to generate the zero-knowledge proof.   
     
     
         17 . The non-transitory computer-readable medium of  claim 15 , wherein the instructions further cause the processor to:
 encrypt the eligibility information based on an encryption key; and   input the encrypted eligibility information into the evaluation algorithm for determining the eligibility of the user to perform the data interaction.   
     
     
         18 . The non-transitory computer-readable medium of  claim 15 , wherein:
 the prompt comprises at least one question; and   the eligibility information received from the user comprises an answer to the at least one question.   
     
     
         19 . The non-transitory computer-readable medium of  claim 15 , wherein:
 a result of the evaluation algorithm indicating the eligibility of the user comprises a binary value;   a first binary value indicates that the user is eligible to perform the data interaction; and   the remaining binary value indicates that the user is ineligible to perform the data interaction.   
     
     
         20 . The non-transitory computer-readable medium of  claim 15 , wherein the instructions further cause the processor to use a Zero-Knowledge Succinct Non-interactive Argument of Knowledge algorithm to generate the zero-knowledge proof of the eligibility of the user to perform the data interaction and verify the zero-knowledge proof.